Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
File:                     a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json)
Hash identifier:          E0LchwcVxLfzPiB4zOgrIYg/Op2afpk6tXQwCDRM7yk=
Subject key identifier:   78:EA:F7:08:75:25:8B:B4:32:82:91:1F:36:5F:B2:C8:08:17:84:A2
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858488DAB52EC0301A85679416000
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     6391
IP address blocks:        2605:8c80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:52:ec:03:01:a8:56:79:41:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=75bd509f-a39f-4217-b3f4-63f9bcbee29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:5c:37:d9:30:86:0f:2b:a0:ec:2e:f4:9c:
                    64:c4:40:27:11:2e:03:ce:21:94:67:ad:04:7d:9b:
                    05:94:72:c9:58:6e:2a:c2:53:b2:48:67:dc:47:2a:
                    8e:67:c7:be:21:1d:5c:7e:78:ac:65:b6:bd:c6:93:
                    7d:82:2a:3b:61:5e:5c:0f:cf:70:39:29:5a:93:4b:
                    d2:cd:c2:69:d3:e5:a2:80:4b:99:05:5e:7b:86:e6:
                    14:2c:a6:32:3c:ae:05:e1:1a:f2:f8:e0:57:0b:25:
                    f8:d5:09:e2:af:96:fa:67:2f:a3:13:24:f2:55:e7:
                    84:23:1a:49:de:f8:ca:6c:e6:3c:3f:32:58:27:54:
                    1e:87:57:c8:f6:f2:9b:2f:fb:28:f1:e0:b8:59:6b:
                    ba:78:aa:81:7d:67:8e:bc:a0:23:da:66:ac:eb:8d:
                    f6:a7:39:96:36:ce:cc:9f:76:f5:d2:83:49:2b:a3:
                    9e:b3:c0:1b:e8:84:d9:60:f4:16:e0:5c:0c:96:12:
                    58:a4:88:2f:01:f7:41:50:f5:0f:04:2b:8e:39:43:
                    7f:45:73:b7:4f:6f:5e:9a:7f:67:c5:3b:7a:ba:49:
                    2c:86:e7:d2:d0:d2:98:b6:0f:9a:a0:fa:28:41:f2:
                    49:62:fd:bf:93:7d:06:35:8e:c2:2c:22:c8:a2:0a:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:F7:08:75:25:8B:B4:32:82:91:1F:36:5F:B2:C8:08:17:84:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:ff:e4:c3:2f:9a:bb:6c:cc:b4:da:9a:21:a4:3f:65:a6:
         e5:1c:6d:6f:b5:61:b4:1a:3b:54:3c:36:91:f6:2d:ff:19:2f:
         e4:c6:20:b3:64:b0:ae:94:dd:ff:67:44:90:4d:7b:3a:9e:3f:
         22:03:4f:ef:4f:aa:c6:67:5f:35:32:4f:48:74:08:95:b4:61:
         8b:09:9c:89:30:b1:5a:e7:f4:99:ef:64:7b:c7:18:ce:c5:fb:
         be:2b:10:81:4c:e1:9c:8e:2a:29:10:49:94:88:3e:6c:b3:28:
         f6:a4:62:94:0c:b6:01:0a:3e:36:c4:bc:77:55:86:34:8c:f0:
         71:91:bd:cd:ec:58:f6:ab:32:93:53:9d:e4:c0:e3:a4:30:77:
         1f:87:dc:a5:8a:a7:ac:3d:c9:3f:4c:16:c9:e4:99:34:34:83:
         ec:aa:ff:6b:bd:20:47:af:b7:2a:55:da:74:5a:10:5f:22:47:
         4c:5a:9b:cc:ff:8d:26:02:80:cf:38:e0:8c:15:fe:1d:0f:b4:
         4a:33:3c:4f:d0:8e:dd:ac:dd:04:d7:40:be:8e:17:22:10:f7:
         92:0f:da:82:1c:44:2e:3d:05:a6:c2:5e:bb:df:2e:f6:4b:74:
         9d:fc:3b:f0:d0:98:16:8f:f1:c9:18:c7:38:7a:28:99:a2:b7:
         ca:17:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:27 2025 by rpki-client